Skip to content

go: bump the dependencies group with 2 updates - #24

Merged
kazeburo merged 1 commit into
masterfrom
dependabot/go_modules/dependencies-bd548649bc
Oct 15, 2026
Merged

kazeburo merged 1 commit into
masterfrom
dependabot/go_modules/dependencies-bd548649bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: github.com/montanaflynn/stats and golang.org/x/sys.

Updates github.com/montanaflynn/stats from 0.12.7 to 0.13.0

Release notes

Sourced from github.com/montanaflynn/stats's releases.

v0.13.0

Changelog

Fix

  • 449204583005211860d0b314eb8434dd418c772c fix: compute NormMoment with a float64 to avoid factorial overflow (#141)
  • 0a6b229e617885819a15f09ae8029c9627a3fc89 fix: preserve finite interpolation in Percentile (#139)
  • 952b8c2eb0a951e00a14e99786979898f71cc2f1 fix: return 0 for invalid Ncr input and return math.MaxInt on overflow (#140)

CI

  • 0742dfd12ead17e9917f99629a2661672a89f295 ci: pin actions to SHAs, restrict token, and test minimum Go version (#143)
  • 256eac68711404068a201e68ce5d39ef2b1e9786 ci: update checkout, setup-go, and codecov to current major versions (#138)

Chore

  • 761edfdbb2581caeb4753af329c3a5046d26cc07 chore: bump minimum Go version to 1.17 (#142)
  • edb982742add7ab69ed0c014fee252f14f2fdf89 chore: include chore and ci commits in changelog
Changelog

Sourced from github.com/montanaflynn/stats's changelog.

[v0.13.0] - 2026-10-06

Fix

  • Preserve finite interpolation in Percentile (#139)
  • Return 0 for invalid Ncr input and return math.MaxInt on overflow (#140)
  • Compute NormMoment with a float64 to avoid factorial overflow (#141)

CI

  • Pin actions to SHAs, restrict token, and test minimum Go version (#143)
  • Update checkout, setup-go, and codecov to current major versions (#138)

Chore

  • Bump minimum Go version to 1.17 (#142)

Commits
  • 5e71d7f chore: update changelog for v0.13.0
  • edb9827 chore: include chore and ci commits in changelog
  • 0742dfd ci: pin actions to SHAs, restrict token, and test minimum Go version (#143)
  • 256eac6 ci: update checkout, setup-go, and codecov to current major versions (#138)
  • 0a6b229 fix: preserve finite interpolation in Percentile (#139)
  • 952b8c2 fix: return 0 for invalid Ncr input and return math.MaxInt on overflow (#140)
  • 761edfd chore: bump minimum Go version to 1.17 (#142)
  • 4492045 fix: compute NormMoment with a float64 to avoid factorial overflow (#141)
  • See full diff in compare view

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits
  • b6b8557 unix/linux: unify ppc64x syscall wrappers
  • aab6988 unix: add PrctlArg5Ptr
  • cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
  • 782b836 unix/linux: don't warn about closed stderr from child process
  • 61592fb unix: return syscall error in *listxattrNS on BSD
  • c136fda unix/linux/Dockerfile: update to Go 1.26.8
  • f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
  • 67f850b unix: update linux to v7.2
  • eb1f659 unix: add O_EXEC and O_SEARCH on darwin
  • 51bc731 unix: add Mmsghdr for linux
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [github.com/montanaflynn/stats](https://github.com/montanaflynn/stats) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `github.com/montanaflynn/stats` from 0.12.7 to 0.13.0
- [Release notes](https://github.com/montanaflynn/stats/releases)
- [Changelog](https://github.com/montanaflynn/stats/blob/master/CHANGELOG.md)
- [Commits](montanaflynn/stats@v0.12.7...v0.13.0)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: github.com/montanaflynn/stats
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 14, 2026
@sonarqubecloud

Copy link
Copy Markdown

@kazeburo
kazeburo merged commit 141fc1c into master Oct 15, 2026
3 checks passed
@kazeburo
kazeburo deleted the dependabot/go_modules/dependencies-bd548649bc branch October 15, 2026 05:59
@github-actions github-actions Bot mentioned this pull request Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant